| Title | Windows Server 2003 & IIS 6.0 - Remote Code Execution |
|---|---|
| Author | thomas_from_offensity,geeknik |
| Severity | Critical |
| Impact | Allows remote attackers to execute arbitrary code on the affected system. |
| Remediation | Upgrade to a supported version of Windows Server and IIS, or apply the necessary security patches. |
| CVSS Score | 9.8 |
| EPSS Score | 0.94429 |
| CVE ID | CVE-2017-7269 |
| CWE ID | CWE-119 |
| Shodan Query | cpe:"cpe:2.3:a:microsoft:internet_information_server" |
| Tags | cve2017 cve rce windows iis kev microsoft vkev vuln |
Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service that could allow remote attackers to execute arbitrary code via a long header beginning with “If <http://” in a PROPFIND request.
OPTIONS / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7269.yaml
🦈 Packet Capture: ⬇️ Download cve-2017-7269.pcap
N/AN/A